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DETAILED ACTION 

A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is eligible 
for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has 
been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 
CFR 1.114. Applicant's submission filed on April 15, 2008 has been entered. Claims 1, 15 and 
28 have been amended and claims 39 and 40 have been cancelled. Claims 1-38 are pending. 



Response to Arguments 

Applicant's arguments filed April 15, 2008 have been fully considered but they are not 
persuasive. Applicant argues that the art on record fails to teach "a first computing entity 
arranged to encrypt a first data set, the encrypting done by the first computing entity being 
based on encrypting parameters...." Applicant further argues that the art on record fails to teach 
"... a decryption key, distinct from the encryption key string..." Examiner disagrees. 

Examiner would point out that, Pienado (US 2002/001 3772) teaches a first computing 
entity arranged to encrypt a first data set (i.e., content), the encrypting done by the first 
computing entity being based on encryption parameters comprising public data of a trusted 
party (i.e., PU-BB-PD) and an encryption key string (i.e., content key, KD) comprising a second 
data set that defines a policy for allowing the output of the first data set onto a said removable 
storage medium (i.e., license/sub-license), the first computing entity being further arranged to 
output the encrypted first data set for the output device (i.e., content being encrypted according 
to content key, content key being encrypted according to PU-BB-PD/black box public key, and 
delivering the encrypted content and sub-license to the portable device, see paragraphs 0278, 
0284-0292) and a second computing entity associated with the trusted party and arranged when 



Application/Control Number: 10/664,069 Page 3 

Art Unit: 2135 

satisfied that said policy has been met, to output for the output device a decryption key, distinct 
from the encryption key string for use in decrypting the encrypted first data set. 

Regarding the newly added claim limitation, where the claims include the phrase "a 
decryption key, distinct from the encryption key string". The examiner cites MPEP 2173.05(i) 

"Any negative limitation or exclusionary proviso must have basis in the original 
disclosure. If alternative elements are positively recited in the specification, they may be 
explicitly excluded in the claims. See In re Johnson, 558 F. 2d 1008, 1019, 194 USPQ 187, 196 
(CCPA 1977) ("[the] specification, having described the whole, necessarily described the part 
remaining. "). See also Ex parte Grasselli, 231 USPQ 393 (Bd. App. 1983), aff 'dmem., 738 F.2d 
453 (Fed. Cir. 1984). The mere absence of a positive recitation is not basis for an exclusion. 
Any claim containing a negative limitation which does not have basis in the original disclosure 
should be rejected under 35 U.S.C. 112, first paragraph, as failing to comply with the written 
description requirement. " 

The phrase clearly recites a negative limitation. Indeed, the specification must contain a 
full, clear and concise description of the claimed subject matter. The specification does not 
literally or implicitly cite a decryption key distinct from the encryption key string. 

Examiner would point out that the art on record teaches the claim limitations and 
therefore the rejection is respectfully maintained. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 
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Claims 1-38 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to comply with 
the written description requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to reasonably convey to one skilled in the 
relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. The specification fails to mention or teach "... a decryption key, distinct from 
the encryption key string ..." 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1-4, 11-18, 25-28, 30,31 and 35-38 are rejected under 35 U.S.C. 102(e) as 
being anticipated by Peinado US 2002/0013772 A1. 

As per claims 1 and 11-13, Peinado teaches a system comprising: 
an output device for outputting data onto a removable storage medium (i.e., figure 13, 
portable device) ; 

a first computing entity arranged to encrypt a first data set (i.e., content), the encrypting 
done by the first computing entity being based on encryption parameters comprising public data 
of a trusted party (i.e., PU-BB-PD) and an encryption key string (i.e., content key, KD) 
comprising a second data set that defines a policy for allowing the output of the first data set 
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onto a said removable storage medium (i.e., license/sub-license), the first computing entity 
being further arranged to output the encrypted first data set for the output device (i.e., content 
being encrypted according to content key, content key being encrypted according to PU-BB- 
PD/black box public key, and delivering the encrypted content and sub-license to the portable 
device, see paragraphs 0278, 0284-0292); and 

a second computing entity associated with the trusted party and arranged when satisfied 
that said policy has been met, to output for the output device a decryption key, distinct from the 
encryption key string for use in decrypting the encrypted first data set, the second computing 
entity being arranged to generate this decryption key in dependence on the encryption key 
string and private data related to said public data (i.e., the portable device/black box decrypting 
the content key by using private key, PR-BB-PD, that is related to the public key, see 
paragraphs 0278, 0284-0292); 

the output device being arranged to use the decryption key in decrypting the encrypted 
first data set (i.e., the portable device using the content key and decrypting the content, see 
paragraphs 0278, 0284-0292). 

As per claims 15, 25 and 26, Peinado teaches a data output method comprising the 
steps of: 

(a) encrypting a first data set the encrypting done by the first computing entity being 
based on encryption parameters comprising public data of a trusted party (i.e., PU-BB-PD) and 
an encryption key string (i.e., content key) comprising a second data set that defines a policy 
(i.e., license/sub-license) for allowing the output of the first data set to a removable storage 
medium (i.e., content being encrypted according to content key, content key being encrypted 
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according to PU-BB-PD/black box public key, and delivering the encrypted content and sub- 
license to the portable device, see paragraphs 0278, 0284-0292), 

(b) providing the encrypted first data set to an output device adapted to output data to a 
removable storage medium (i.e., delivering the encrypted content and sub-license to the 
portable device, see paragraphs 0278, 0284-0292); 

(c) at the trusted party (portable device black box) checking that said policy has been 
satisfied and thereafter providing the output device with a decryption key, distinct from the 
encryption key string for use in decrypting the encrypted first data set, this decryption key being 
generated in dependence on the encryption key string and private data related to said public 
data (i.e., the portable device/black box decrypting the content key by using private key, PR-BB- 
PD, that is related to the public key, see paragraphs 0278, 0284-0292); and 

(d) at the output device using the decryption key in decrypting the encrypted first data 
set and outputting the first data set to a removable recording medium (i.e., the portable device 
using the content key and decrypting the content, see paragraphs 0278, 0284-0292). 

As per claims 28, 30, 31 and 35-37, Peinado teaches a printing system comprising: 
a printer [paragraphs 036, 0099, 0267]; 

a first computing entity arranged to encrypt a first data set (i.e., content) the encrypting 
done by the first computing entity being based on encryption parameters comprising public data 
of a trusted party (i.e., PU-BB-PD) and an encryption key string (i.e., content key, KD) 
comprising a second data set that defines a policy for allowing the output/printing of the first 
data set onto a said removable storage medium (i.e., license/sub-license), the first computing 
entity being further arranged to output the encrypted first data set for the output device/printing 
device (i.e., content being encrypted according to content key, content key being encrypted 
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according to PU-BB-PD/black box public key, and delivering the encrypted content and sub- 
license to the portable device, see paragraphs 0278, 0284-0292); and 

a second computing entity associated with the trusted party and arranged when satisfied 
that said policy has been met, to output for the output device a decryption key, distinct from the 
encryption key string for use in decrypting the encrypted first data set, the second computing 
entity being arranged to generate this decryption key in dependence on the encryption key 
string and private data related to said public data (i.e., the portable device/black box decrypting 
the content key by using private key, PR-BB-PD, that is related to the public key, see 
paragraphs, 0278, 0284-0292); 

the output device/printer being arranged to use the decryption key in decrypting the 
encrypted first data set (i.e., the portable device using the content key and decrypting the 
content, see paragraphs 0278, 0284-0292). 

As per claims 2 and 1 6, Peinado further teaches the system wherein the second 
computing entity is arranged to generate the decryption key only when said policy has been met 
[see paragraphs, 0278, 0284-0292]. 

As per claims 3 and 17, Peinado further teaches the system wherein the second 
computing entity is arranged to issue to the first computing entity at least one of: the second 
data set, the encryption key string, a derivative of the encryption key string usable by the first 
computing entity, in place of the encryption key string, in the encryption of said first data set 
[paragraphs 0278, 0284-0292]. 
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As per claims 4 and 1 8, Peinado further teaches the system wherein the second 
computing entity is arranged to receive the encryption key string directly or indirectly from the 
first computing entity [paragraphs 0278, 0284-0292]. 

As per claims 14, 27 and 38, Peinado further teaches the system further comprising a 
portable device comprising the second computing entity and a first communications interface, 
the output device comprising a second communications interface arranged to cooperate with the 
first communications interface to enable communication between the second computing entity 
and the output device, the communications interfaces being such that the portable device must 
be present at the output device for the communication between the second computing entity to 
take place [see figure 13]. 

Allowable Subject Matter 

Claims 5-10, 19-24, 29 and 32-34 objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims and overcoming the 112 1 st rejection indicated above. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to BEEMNET W. DADA whose telephone number is (571 )272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571 ) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Beemnet W Dada/ 
Examiner, Art Unit 2135 



July 20, 2008 



